Enterprise Risk Specialist

Description

Responsible for the analytical and documentation-intensive work of the enterprise risk function — developing and operationalizing key risk indicators (KRIs) and key performance indicators (KPIs), supporting Risk Oversight Committee (ROC) and Board reporting, and building the foundation for the Risk & Control Self-Assessment (RCSA) program. Reporting to the Manager, Enterprise Risk, this role turns risk data into clear, decision-ready reporting and helps establish the repeatable analytical infrastructure the function needs as the organization scales.

The role gathers and analyzes risk data from across the Risk Office and business units, maintains reporting and dashboards against the board-approved risk appetite, and supports the documentation and methodology work that underpins enterprise risk management. It coordinates with Compliance, Fraud, Finance, and business partners to source data and validate results. As a second-line risk function, the role provides enterprise-wide risk governance and reporting distinct from business-line risk ownership.

Operating with general guidance within established policy and methodology, the Enterprise Risk Specialist produces analysis and draft reporting for review, applies practical judgment in day-to-day work, and escalates questions outside precedent to the Manager, Enterprise Risk.

Responsible for the analytical and documentation-intensive work of the enterprise risk function — developing and operationalizing key risk indicators (KRIs) and key performance indicators (KPIs), supporting Risk Oversight Committee (ROC) and Board reporting, and building the foundation for the Risk & Control Self-Assessment (RCSA) program. Reporting to the Manager, Enterprise Risk, this role turns risk data into clear, decision-ready reporting and helps establish the repeatable analytical infrastructure the function needs as the organization scales.

• Develops, monitors, and reports on Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) across enterprise risk programs, aligning metrics with risk appetite and regulatory expectations.
• Establishes and documents thresholds, tolerance bands, and escalation triggers for each indicator, in coordination with the Manager.
• Identifies data sources and builds repeatable — ideally automated — data collection and calculation methods, monitoring data quality.
• Designs dashboards and reporting views presenting KRIs/KPIs against appetite for management and the ROC, with trend analysis and commentary.
• Operationalizes KRI monitoring into a regular reporting cadence and recalibrates indicators and thresholds periodically as the risk profile evolves.

• Supports maintenance of the Risk Appetite Statement and prepares supporting analysis for the annual review-and-approval cycle.
• Produces the quarterly Risk Dashboard and supporting materials reporting risk levels and trends against appetite, with tolerance/warning status.
• Assists in preparing Risk Oversight Committee materials — reporting packages, supporting analysis, and consolidated risk reporting drawn from across the Risk Office.
• Performs risk exposure and trend analysis, drafting observations on out-of-tolerance levels and emerging risks for the Manager’s review.

• Supports build-out of the RCSA program — methodology, risk-and-control taxonomy, templates, and residual-risk approach — in coordination with the Lead and Manager.
• Assists in running the RCSA pilot with one or two business units, capturing risks, controls, and issues into a register integrated with issue tracking.
• Maintains risk registers, the risk library, documentation, and analytical…